I'm mostly thinking out loud here. And just trying to share and learn from others. If your physical security is good I guess it does not matter. If the cops rush the house maybe ? The point would be, there may be exploitable bugs in your Xserver that could be used to gain access ( or a magic SysRQ dump ? ) but if the disk is hibernated it's the luks passphrase that is required.